AbuseIPDB » 178.128.192.50

178.128.192.50 was found in our database!

This IP was reported 77 times. Confidence of Abuse is 94%: ?

94%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 178.128.192.50

Whois 178.128.192.50

IP Abuse Reports for 178.128.192.50:

This IP address has been reported a total of 77 times from 54 distinct sources. 178.128.192.50 was first reported on June 12th 2025, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
boxed-it	2025-06-14 16:14:44 (4 weeks ago)	GET /.git/config (Tarpitted for 1d15h9m37s, wasted 8.06MB)	Web App Attack
sid3windr	2025-06-14 14:49:04 (4 weeks ago)	GET /.env (Tarpitted for 1d15h8m27s, wasted 8.06MB)	Web App Attack
boxed-it	2025-06-14 12:20:09 (4 weeks ago)	GET /.env (Tarpitted for 1d15h9m36s, wasted 8.06MB)	Web App Attack
Anonymous	2025-06-13 23:26:29 (4 weeks ago)	Hacking website	Hacking
Gem	2025-06-13 22:09:20 (4 weeks ago)	Unauthorized web scan.	Web App Attack
Cynar & Cinny	2025-06-13 16:31:51 (1 month ago)	ufw_block_log	Port Scan
Cynar & Cinny	2025-06-13 16:10:49 (1 month ago)	httpd_block_log	Bad Web Bot
barbarella	2025-06-13 06:44:19 (1 month ago)	Multiple (4) times attack on https port 443: Illegal http header (GET /) 06:44:19 Attempted ... show moreMultiple (4) times attack on https port 443: Illegal http header (GET /) 06:44:19 Attempted to access git files. (GET /.git/config) 06:44:19 Illegal http header (GET /) 06:44:19 Configuration snooping in .env file (GET /.env) show less	Hacking Web App Attack
Geppetto	2025-06-13 06:08:32 (1 month ago)	Connection to IP instead of Domain-Name, HTTP request to HTTPS port [13/Jun/2025:08:08:31 +0200] 400 ... show moreConnection to IP instead of Domain-Name, HTTP request to HTTPS port [13/Jun/2025:08:08:31 +0200] 400 - GET http "/.env" [Client 178.128.192.50] [Length 252] [Gzip -] "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);" "-" ... show less	Bad Web Bot Web App Attack
barbarella	2025-06-13 05:09:29 (1 month ago)	Multiple (4) times attack on https port 443: Illegal http header (GET /) 05:09:29 Configura ... show moreMultiple (4) times attack on https port 443: Illegal http header (GET /) 05:09:29 Configuration snooping (GET /.git/config) 05:09:29 Illegal http header (GET /) 05:09:29 Configuration snooping with .env file (GET /.env) show less	Hacking Web App Attack
IT RDC	2025-06-13 04:59:35 (1 month ago)	2025/06/13 06:59:35 [info] 32169#0: *2187165 client sent plain HTTP request to HTTPS port while read ... show more2025/06/13 06:59:35 [info] 32169#0: *2187165 client sent plain HTTP request to HTTPS port while reading client request headers, client: 178.128.192.50, server: zimbra, request: "GET /.env HTTP/1.1", host: "83.238.86.34:443" ... show less	Web App Attack
Anonymous	2025-06-13 03:52:08 (1 month ago)	Reported from Nginx log analysis 11. Log: 178.128.192.50 - - [13/Jun/2025:xx:xx:xx 0200] "GET /.env ... show moreReported from Nginx log analysis 11. Log: 178.128.192.50 - - [13/Jun/2025:xx:xx:xx 0200] "GET /.env HTTP/1.1" xxx xxx "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);" "-" "DE Germany Frankfurt am Main" "AS14061" "DIGITALOCEAN-ASN" show less	Port Scan Brute-Force SSH
Bedios GmbH	2025-06-13 03:45:26 (1 month ago)	Login credentials theft attempt	Hacking
Lunik	2025-06-13 03:36:30 (1 month ago)	Malicious access	Web Spam Port Scan Web App Attack
kkeyser	2025-06-13 03:15:25 (1 month ago)	GET /.env HTTP/1.1	Web App Attack

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩